Mercury Broadband Router Скачать руководство пользователя страница 43 | Manualshive

Страница: 43 / 67

background image

Chapter 4 Advanced Firewall Function

Besides the native protection features from NAT, Broadband

Router provide lots of advanced functions which are popular

in most firewall devices such as deny PING, block service

port, URL keyword blocking, virtual server, DMZ and intrusion

event log. (It is recorded in Broadband Router internal buffer,

please refer to 3.1.2)

4.1 Access Control

ccess control” allow you to control the WAN-to-LAN or

LAN-to-WAN access capability.

Press Access Control item under the Advanced item, then

there are 3 options shown below.

1. Respond to Ping from WAN:

Allow or Deny responding if there is any PING packet sent to

42

«
...
41
42
43
44
45
...
»

Содержание Broadband Router

Страница 1: ...Broadband Router User Manual F Ver V1 26 Doc Ver V1 0 ...

Страница 2: ...e changed without prior notice FCC Interference Statement This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against radio interference in a commercial environment This equipment can generate use and radiate radio frequency energy and if not installed and use...

Страница 3: ...nts relating to electromagnetic compatibility EN 55022 A1 Class A and EN 50082 1 This meets the essential protection requirements of the European Council Directive 89 336 EEC on the approximation of the laws of the member states relation to electromagnetic compatibility 2 ...

Страница 4: ... TO LAN 12 2 3 NETWORK SETTING IN ADMINISTRATOR COMPUTER 13 CHAPTER 3 DEVICE ADMINISTRATION 17 3 1 WEB BASED CONFIGURATION 17 3 1 1 Device Information 18 3 1 2 Administration 19 3 1 3 EZ Setup WAN 22 3 1 4 EZ Setup LAN 29 3 2 TELNET CONSOLE CONFIGURATION 32 3 2 1 Device Information and Administration configuration in Broadband Router 33 3 2 2 WAN Setup 34 3 2 3 LAN Setup 38 3 2 4 Advanced function...

Страница 5: ...MON PROBLEMS SOLUTIONS 52 4 8 FREQUENTLY ASKED QUESTIONS 55 Appendix A TCP IP Well Known Port 57 Appendix B Illustrated Typical Application 58 B 1 Home User Application 58 B 2 SOHO environment Application 59 Appendix C Cabling and Pin Assignment 60 C 1 RJ 45 60 C 2 RS232 62 Appendix D Configure IP manually 64 Appendix E Technical Information 66 4 ...

Страница 6: ...n a non technical person will easily configure it to meet the different application This product does not only provide a complete solution to share the Internet bandwidth it also serves as an Internet Firewall to protect your LAN data from being accessed by outside intruder hacker Figure 1 1 Since all incoming data packets have been analyzed monitored all unwanted packet may be filtered out and be...

Страница 7: ...port 10 100M switched Hub for LAN users DHCP Server DNS proxy support can save an extra PC Server in LAN All the networked computers in LAN can retrieve TCP IP setting IP address subnet mask gateway DNS IP automatically from this device Simultaneously act as both DHCP Server on the LAN and a DHCP Client on the WAN for most easy application Connects multiple LAN PCs to the Internet with only one dy...

Страница 8: ... address TCP IP port service URL name keywords and 24 hour time zone Virtual Server Port forwarding function Internet servers WWW FTP E mail in LAN could be virtually exposed to WAN for outside Internet user access This is a useful and secure network deployment for Internet servers DMZ De Militarized Zone Host Administrator can totally expose a host PC in LAN to the Internet without any firewall p...

Страница 9: ...ement One Ethernet based broadband Internet connection like cable ADSL modem or other router One PC with a NIC card and installed TCP IP protocol stack Microsoft Internet Explorer 5 or later Netscape V4 7 or later web browser All TCP IP networked computers in LAN 1 4 Panel Description 1 4 1 Front Panel Device Indicators POWER The Power LED illuminates whenever Broadband Router is powered on 8 ...

Страница 10: ...LED is continuously illuminated it means WAN device is successfully connected or Broadband Router WAN port is working now SPD100 Indicates 10 or 100Mbps wire speed correspondingtoWANport Onis100Mps FDX COL FDX Full Duplex Mode On means the current connection is on full duplex mode COL Collision Blinks means connection experiences collisions WAN port is NIC card type pin assignment This means WAN p...

Страница 11: ...dband Router Act activity Blinking means data communication is in progress If the LED is continuously illuminated it means LAN device is successfully connected or Broadband Router port 1 2 3 4 is working SPD100 Indicates 10 or 100Mbps wire speed corresponding to each port On is 100Mps FDX COL FDX Full Duplex Mode On means the current connection is on full duplex mode COL Collision Blinks means con...

Страница 12: ... connect with MODEM or console terminal The options could be configured via WEB browser please refer to Appendix C 2 for pin assignment cabling Default It is the factory default button Hold it down continuously about 5 seconds to reset the hardware setting into factory default The default LAN IP becomes 192 168 8 1 7 5VDC Where you will plug the AC DC Power adapter 11 ...

Страница 13: ... LED is always off please check the feeding power and the connection cable between the Cable DSL modem and WAN port Please refer to Appendix C for detailed cabling and pin assignment Figure 2 1 The hardware connection of WAN interface for Broadband Router 2 2 Hardware Connection to LAN Connect the network cable from your computer Ethernet port to one of Broadband Router 4 LAN ports Figure 2 2 If i...

Страница 14: ...nistrator computer In order to configure the Broadband Router with a networked PC in LAN it is necessary for administrator to have an accurate network setting in this PC then the communication between Broadband Router and administrator PC could be possible The following description assumes Broadband Router is on factory default condition If not please hold the reset button down for more than 5 sec...

Страница 15: ...p1 Click Start button select Settings and then choose Control Panel Double click Network icon Choose configuration item Select the TCP IP protocol option which is associated with your network card adapter To install TCP IP protocol first Step2 Click the Properties button and then press the IP Address tab Select Obtain an IP address automatically 14 ...

Страница 16: ...continue System may request to restart After restart the connection between Broadband Router window is established Please check it as follows Windows 9x Me Start control panel Run Type inicfg and then press ok button 15 ...

Страница 17: ...S command window and type pconfig all to check Ethernet adapter information All Ethernet adapter information is shown in this window Check if you get an IP address like 192 16 8 x and the default gateway is the default IP of Broadband Router If all the steps are finished the network should be working now In case there is something wrong please refer to Chapter 5 for troubleshooting 16 ...

Страница 18: ...his is due to the consideration of system database consistency If there is any other one intending to login none could succeed to login at that time Broadband Router will pop up an alert message The following description also assumes Broadband Router is on factory default condition 3 1 Web Based Configuration Open the web browser and type http 192 168 8 1 in the browser address box This IP address...

Страница 19: ...ny time Type in the default Administrator password dmin Then press enter to login 3 1 1 Device Information After login the first page is the Device Information of Broadband Router This page Show s the detailed status of Broadband Router and display s the current WAN information about dial up duration and traffic bytes count 18 ...

Страница 20: ...ar button to clear the WAN traffic counter And you can press the Refresh button to refresh the last update 3 1 2 Administration Press the Administration option on the left frame of this page to assign change the setting 19 ...

Страница 21: ... When completed Broadband Router restart s automatically Broadband Router allow system setting Backup Restore only when both firmware are of the same Version Otherwise Broadband Router will deny the Restore operation for reliability consideration Administrator Reset to Default Type in your old password and new password and confirm it Then press OK to send this request Auto Logout Whenever administ...

Страница 22: ... second Broadband Router will restart automatically Miscellaneous Commands View system events log It records lost of system events such as system start administrator log in log out dial hang up and hacker intrusion event In addition it stamps the date time for each event Normally each event will be shown sequentially by the order of time stamp except some time out event Press View System Log to br...

Страница 23: ...a detailed intruder hacker information You can press Refresh to upgrade these events and press Back to the Administration page Clone MAC Duplicate the MAC address of administrator PC into WAN MAC of Broadband Router Restart System Force Broadband Router to restart immediately 3 1 3 EZ Setup WAN Press the EZ Setup WAN option in the left frame There are 5 connection types in this page Each connectio...

Страница 24: ...ed in fixed IP address application environment Router to router interconnect or Ethernet based backbone is the most common case Choose the tatic option and fill in the blanks according to the ISP provided information WAN IP Address The IP Address of Broadband Router as seen by external user s on the Internet including your ISP WAN Subnet Mask The Broadband Router WAN IP address ranges eg 255 255 2...

Страница 25: ...ess Save Restart button B DHCP Client Connection DHCP Client connection means that ISP will dynamically assign Broadband Router IP address and other setting For the Domain Name and Host Name they are unused for most ISP Let it keep blank In case they are needed for your Internet connection please contact with your ISP for correct Domain name and Host Name Press Save Restart button to store this se...

Страница 26: ...hey do choose PPPoE option then fill in Your PPPoE account and PPPoE password The PPPoE Service Name may be optional It depends on the ISP Dial on Demand Choose this option Broadband Router will attempt to connect with ISP if 1 there is at least one LAN user would like to access Internet and 2 the current WAN connection is on disconnected condition Auto disconnect when idled over sec fill in a tim...

Страница 27: ...eck the dial log in activity refer to 3 1 2 D PPTP Connection If Broadband Router is connected to the Internet with DSL modem most likely is ALCATEL modem in west Europe then choose PPTP PPPoA connection type Please check your ISP for details Certainly this connection type is also used by PPTP L2 VPN application Where My IP address and Server IP address are the Broadband Router PPTP client and ADS...

Страница 28: ...rent WAN connection is on disconnected condition Auto disconnect when idled over sec fill in a time period in seconds if you want to disconnect automatically when your Internet connection is idle more than a period of time E PPP Connection PPP point to point protocol is the most popular protocol to access Internet through telephone line and modem V 90 ISDN If your Internet connection type is modem...

Страница 29: ...peed This work only for most Rockwell Conexant V 90 modem Press Save Restart button to store In case something wrong please browse the system event log to check the dial log in activity refer to 3 1 2 28 ...

Страница 30: ...nnection with Broadband Router when they are not in the same LAN subnet Thus the administration operation does not work until they are in the same subnet again by DHCP release renew IP 1 DHCP Server Enabled Choose this option if you want Broadband Router to assign IP to LAN computers automatically Then fill in following blanks DNS Proxy LAN computers get their DNS server from Broadband Router firs...

Страница 31: ...ess must greater start address Lease time the assigned IP will be valid during the lease interval Assign fixed IP to MAC If there are some computers like web E mail server which will be assigned a fixed IP by DHCP server you can set those computers with their own predefined IP Those computers will be identified by their MAC address Press DHCP Client List to show DHCP Client list 30 ...

Страница 32: ...se press Save Restart button to save all those settings 2 DHCP Server Disabled Disable DHCP Server function of Broadband Router You just have to fill in LAN IP Address and then press Save Restart button 31 ...

Страница 33: ...ers should be set to 115200 8 N 1 baud rate 115200 8 data bit No parity 1 stop bit When the RDY LED is blinkng regularly press the Enter key of the keyboard once then the main menu is shown promptly Instead Telnet must perform login operation in advance for LAN environment Telnet 192 168 8 1 to enter the configuration main menu In general the Telnet console configuration is menu driven operation P...

Страница 34: ...administrator password Press 1 for this setting then system will request you to enter your old password enter your new password enter confirm password Then Set new password OK 2 Upgrade new firmware Press 2 for this setting You must use a telnet program with file transfer capability to upgrade your firmware file Window built in hyperterminal does not provide this feature 3 Set Date Time Press 3 fo...

Страница 35: ...enever administrator log in by web browser the date time is calibrated automatically according to the login PC 4 Reset to factory default and restart 5 Restart system 3 2 2 WAN Setup Select WAN setup to choose the feasible configuration Press 1 to select the WAN Connection type option menu 34 ...

Страница 36: ...ing to the ISP provided information WAN IP Address The IP Address of Broadband Router as seen by external users on the Internet including your ISP WAN Subnet Mask The Broadband Router WAN IP addres ranges eg 255 255 255 248 means Broadband Router have 8 IPaddress range WAN Gateway ISP will provide you with the Gateway IP Address WAN 1st DNS DNS Domain Name Server ISP will provide this address WAN ...

Страница 37: ...onnection If you are connected to the Internet through a DSL line check your ISP if they use PPPoE If they do choose PPPoE option then type in Your PPPoE account and PPPoE password The PPPoE Service Name may be optional It depends on the ISP Dial on Demand Choose this option Broadband Router will attempt to connect with ISP if 1 there is at least one LAN user would like to access Internet and 2 th...

Страница 38: ...his ex Type 2 to request MODEM to report carrier speed instead of DTE speed This work only for most Rockwell conexant V 90 modem When all settings are finished don forget to type Y to restart system 5 PPTP client PPTP client mode are used with some European DSL modem or used to provide L2 VPN tunneling connection If PPTP client mode is choosen please enter My IP address and My Server IP address fo...

Страница 39: ...od of time When all settings are finished don forget to type Y to restart system 3 2 3 LAN Setup The LAN Setup configuration in telnet environment has 2 items 1 LAN IP Address type in the IP address of Broadband Router as it is seen on the internal LAN computer If Telnet is used and LAN IP is changed the administrator may have lost connection with Broadband Router when they are not in the same LAN...

Страница 40: ...er will search the ISP DNS automatically B Set DHCP IP Pool Range Whenever there is a request the DHCP server will allocate a unused IP from the IP address pool to the requesting computer End address must greater start address C Set DHCP Lease Duration the assigned IP will be valid during the lease duration D Assign fixed IP address by MAC address If there are some computers like web E mail server...

Страница 41: ...nd enable DHCP Server function of Broadband Router 3 2 4 Advanced function 1 Access control Under the main menu of telnet 192 168 8 1 type A to enter into access control Allow Deny Respond to Ping from WAN Allow or Deny responding if there are any Ping packet sent to WAN of Broadband Router Allow Deny Web Management from WAN This function allow administrator to configure Broadband 40 ...

Страница 42: ... directly In order to reserve HTTP service port 80 used for virtual server function This remote web administration function utilizes another port 64511 instead e g http 211 79 244 45 64511 2 User command This is reserved for diagnostic purpose 41 ...

Страница 43: ...t URL keyword blocking virtual server DMZ and intrusion event log It is recorded in Broadband Router internal buffer please refer to 3 1 2 4 1 Access Control ccess control allow you to control the WAN to LAN or LAN to WAN access capability Press Access Control item under the Advanced item then there are 3 options shown below 1 Respond to Ping from WAN Allow or Deny responding if there is any PING ...

Страница 44: ...s remote web administration function utilizes another port 64511 instead e g http 211 79 244 45 64511 3 Block Client in LAN This function is used to inhibit some LAN clients by IP address from access Internet resources Since all inhibiting LAN client is recognized by its IP address Thus no matter the inhibiting LAN client IP address is assigned by DHCP server or manual setting this function always...

Страница 45: ...AN connec tion type is Dial On Demand like PPPoE PPP Then Broadband Router could auto disconnect at normal condition Otherwise the periodical e Mail checking from LAN user will cause Broadband Router to keep WAN connection alive for ever Certainly at this situation the LAN user can only use e Mail server inside if POP3 server exist in LAN 4 2 Service Time Allocation Service Time Allocation allow a...

Страница 46: ... It could protect children from surfing Internet con tinuously for more than a pre defined period X meanwhile Broadband Router will still stop service until period Y is expired The other mechanism is simply dependent on a daily time zone This means the Broadband Router LAN to WAN service is on or off according to a predefined daily schedule table 45 ...

Страница 47: ... filtering mechanism Administrator could enter the URL keywords for which website to be rejected Then Broadband Router will reject all kind of websites which URL names are matched or partially matched For example if the keyword is xyz then all www xyz com ftp xyz com xyz abc com are all blocked Press Save Restart button after filling keywords 46 ...

Страница 48: ...ernet As a result Broadband Router provide Virtual Server functions to meet this demand In addition Broadband Router also protect the servers and all other computers in LAN simultaneously Since all the Internet servers always handle the fixed TCP UDP service port number like WWW is 80 FTP is 21 Thus any packets from WAN which destination port number is matched with Broadband Router virtual server ...

Страница 49: ...ed accessed by Internet intruder hacker However the advantage is that all computers in DMZ are totally exposed to Internet thus all of them gain the full access right privilege to outside Internet In such case Theoretically all Internet applications should be compatible with them because there is not any interference from firewall function There are more and more Internet applications that need 2 ...

Страница 50: ...2 way commu nication capability This is very useful whenever you encounter some incompatible applications 2 way online game for home user then DMZ feature could often avoid this problems The following shows the single DMZ host is allowed due to the single WAN IP address condition for example WAN connection type is DHCP client PPPoE and PPP 4 6 Multiple DMZ Host In case WAN connection type is stati...

Страница 51: ...e DMZ host In general the mechanism of multiple DMZ host is based the mapping relation between WAN IP and LAN IP shown below And these DMZ host IP will skip NAT port translation handling to gain WAN IP1 roadband Router LAN IP1 DMZ host1 WAN IP2 roadband Router LAN IP2 DMZ host2 WAN IP3 roadband Router LAN IP3 DMZ host3 WAN IP8 roadband Router LAN 50 ...

Страница 52: ...provides leased line service DSL is more common to subscribers meanwhile could offer a range of IP address for subscription In this case there are two type of connection configuration One is Bridging mode the other is Routing mode For example the ISP provides 210 65 226 0 7 IP range subnet mask is 255 255 255 248 then subscriber could have 5 computers at most to access Internet simultaneously Sure...

Страница 53: ...ng Figure 4 2 is a typical Router to Router Multi DMZ configuration Figure 4 2 Routing mode For those DMZ hosts in LAN they are virtually exposed in Internet environment Broadband Router no longer provide firewall protection function for them Troubleshooting 4 7 Common Problems Solutions This section provides possible solutions to problems regarding the installation and operation of Broadband Rout...

Страница 54: ...unction to let PC get IP address from Broadband Router automatically Make sure that the IP address of your PC is 192 168 8 17 128 Check Subnet Mask value it should be set to 255 255 255 0 to match Broadband Router 2 Fail to configure Broadband Router through web browser Check the hardware connection of Broadband Router LAN port If the Link Act LEDs on the front panel are working properly In Window...

Страница 55: ...c address Host name Domain name Check if it is right 4 ime out error message pop up when I enter a URL or IP address Check if other PCs work If they do ensure that your workstations IP settings are correct IP address Subnet Mask Default gateway and DNS If the PCs are configured correctly but still not working check Broadband Router Ensure that it is connected and ON Connect to it and check it s se...

Страница 56: ... on its WAN port Since Broadband Router WAN is an auto sensing 10 100 port it is also compatible with 10Mb only WAN devices 3 What is NAT Network Address Translation and what is it used for NAT translates multiple IP address on the private LAN to one public address that is sent out to the Internet NAT has 2 functions It adds a level security since the IP address of a PC connected to the private LA...

Страница 57: ...AT and TCP IP stateful packet inspections 6 What can I do when I am not able to get the web con figuration screen for this router You may have to remove proxy settings on your Internet Browser s or remove dial up settings on your browser If you use PPPoE or PPP WAN connection 7 What is DMZ DeMilitarized zone DMZ allows one IP address computer to be exposed to the Internet Some applications require...

Страница 58: ...band Router The router advanced features of the router includes Access Control URL Blocking Virtual Server DMZ Appendix A TCP IP Well Known Port Any application or process that uses TCP for its transport is assigned a unique identification number called a TCP port TCP ports specify the path of communications between client and server applications These ports are numbered beginning with zero Port n...

Страница 59: ...P FTP command 23 TELNET Terminal Connection 25 SMTP SMTP 53 DOMAIN Name Domain Name Server 79 FINGER Finger 80 HTTP Web 110 POP3 POP3 113 AUTH Authentication Service 139 NETBIOS SSN NETBIOS Session Service 1723 PPT Point to Point Tunneling Protocol Appendix B Illustrated Typical Application B 1 Home User Application Figure B 3 Home user application DSL Cable modem 58 ...

Страница 60: ... B 4 Home user application ISDN V 90 Modem B 2 SOHO environment Application Figure B 5 SOHO environment application Simple IP sharing Figure B 6 SOHO environment application DHCP Server in Broadband Router 59 ...

Страница 61: ...choice Straight through cables are used for connecting computers NIC card to a hub Crossover cables are used for connecting a hub to another hub Broadband Router provides a built in uplink normal switch uplink mode is crossed internally which allows you to link or connect hubs together with a straight through cable instead C 1 1 RJ 45 pin assignment There are 8 thin color coded wires inside run fr...

Страница 62: ...of the plastic RJ 45 tip the part that goes into a wall jack first is facing away from you Face the clip down so that the copper side faces up the springy clip will now be par allel to the floor when looking down on the copper side wire 1 is on the far left C 1 2 Connection between NIC card and Hub A straight through cable wire 1 2 3 and 6 at one end of the cable are also wires 1 2 3 and 6 at the ...

Страница 63: ...e is used in connecting hubs directly Table C 3 Crossover Cabling Wire Becomes 1 3 2 6 3 1 6 2 C 2 RS232 The RS 232 was originally set to standardize the interconnec tions of terminals and host computers through public telephone networks Its interface pre supposes a common ground between the DTE and DCE RS232 is used to connect both Broadband Router and PC or Modem in this case With different pin ...

Страница 64: ...outer serial port assignment The serial port of BROADBAND ROUTER is a D Sub9 male type connector Each pin has its own function Table C 4 Pin Number Signal Name 1 Shield 2 Received Data 3 Transmitted Data 4 DTE Ready DTR 5 Signal Ground 6 DCE Ready DSR 7 Request to send 8 Clear to send 9 Ring indicator C 2 2 Connection between Broadband Router and PC console DTE DTE Male ...

Страница 65: ...IP Address Type in your customized IP address The default IP address of this product is 192 168 8 1 So you just can type in one IP Address like 192 168 8 xxx xxx can be numbers from 1 to 253 Set the Subnet Mask as 255 255 255 0 In the New Gateway tab add IP address of this product The default IP Address of this product is 192 168 8 1 64 ...

Страница 66: ...Change to DNS configuration tab enable DNS and add DNS values that is provided by your ISP into DNS Server Search Order Click ok to finish 65 ...

Страница 67: ...Console Modem port One D sub9 male DTE type EIA RS232C LED indication Power Ready WAN Link Act 10 100 Full Duplex Collision Modem Ready CDLAN Link Act 10 100 Full Duplex Collision Button Factory default setting Environmental Power Input External DC 7 5V 1A Unit Weight 300g Certification FCC class A CE mark Operating Temperature 0 to 40 32 to 104 Storage Temperature 20 to 70 4 to 157 Operating Humi...

Отзывы:

Нет отзывов

Похожие инструкции для Broadband Router

Бренд: DBM Страницы: 50

Бренд: Obihai Страницы: 2

Бренд: Patton electronics Страницы: 2

ipRocketLink 3086FR

Бренд: Patton electronics Страницы: 6

Бренд: Patton electronics Страницы: 16

Бренд: Patton electronics Страницы: 51

Бренд: Datasheen Страницы: 25

InterReach Fusion SingleStar

Бренд: LGC wireless Страницы: 154

NVIP- NVRA0104/GO

Бренд: Novus Страницы: 44

Бренд: StarTech.com Страницы: 9

Бренд: ADTRAN Страницы: 20

Бренд: Sierra Wireless Страницы: 2

Бренд: Goobay Страницы: 28

Бренд: Moxa Technologies Страницы: 94

Бренд: Actisense Страницы: 14

Бренд: ActionTec Страницы: 83

Бренд: Billion Страницы: 157

Бренд: Haier Страницы: 9

Бренды по названию

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Популярные бренды

Загрузить еще бренды